⚡️ (hosts/system) enable stevenblack blocklists

hosts/hydrogen/system/networking/default.nix

@@ -8,5 +8,11 @@
 
     # domain name servers, use clouflare family
     nameservers = ["1.1.1.2" "1.0.0.2"];
+
+    # firewall
+    firewall.enable = true;
+
+    # https://github.com/StevenBlack/hosts
+    stevenblack.enable = true;
   };
 }

hosts/neodymium/system/networking/default.nix

@@ -1,26 +1,18 @@
-{lib, ...}: {
+{...}: {
+  network = {
     # the name of the machine
-  networking.hostName = "neodymium";
+    hostName = "neodymium";
 
     # domain name servers, use clouflare family
-  networking.nameservers = ["1.1.1.2" "1.0.0.2"];
+    nameservers = ["1.1.1.2" "1.0.0.2"];
 
     # use networkManager, see nmcli
-  networking.networkmanager.enable = true;
+    networkmanager.enable = true;
 
     # firewall
-  networking.firewall = {
+    firewall.enable = true;
-    enable = true;
 
-    allowedTCPPorts = [];
+    # https://github.com/StevenBlack/hosts
-    allowedUDPPorts = [];
+    stevenblack.enable = true;
   };
-
-  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
-  # (the default) this is the recommended approach. When using systemd-networkd it's
-  # still possible to use this option, but it's recommended to use it in conjunction
-  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
-  networking.useDHCP = lib.mkDefault true;
-  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
-  # networking.interfaces.wlp4s0.useDHCP = lib.mkDefault true;
 }